Davit2005

We used Dell desktops at a previous place then they swapped them out for HP 800's was a nightmare to get the drivers installed even resulting in a bluescreen a number of times due to a USB 3 driver. In the end I used native Windows 10 drivers and jus added the drivers that were missing or needed manufacturer driver. HP/Aruba switch firmware is slightly better although needing an account to get them and even then some are not available still without a call to HP.

12 years back had a small shed and large room cleared. £150 with disposal paperwork, I still have the paperwork today, lol. All they had to do was transfer the rubbish/furniture to their Van and dispose of it. I considered a skip but ruled it out. If you are doing a Garden I would anticipate a bigger cost due to potential equipment needed and labour plus the disposal costs. I did one for someone I worked with and they got a mini excavator in.

We've had contractors plug in personal routers and a academic who thought he would be smart and plug in a home router, took us about 2 weeks as the problems were very intermittent and he'd used the same range that was normally given to that building adding to the confusion. We found it by getting a PC that had the issue finding the DHCP server IP address and used ARP to get MAC address and then scouring a 3 floor building for the port and found the router we were not amused We then rolled out DHCP snooping to all edge switches.

If its not us it's our users, lol. Glad you found the issue.

Sorry it made me laugh. @Koldov, have you thought of a reservation instead of static. 2 reasons, one you can manage it without needing access to the device the other is that you have a central location where you can see all IPs. Back in 1996 I looked after a small engineering firms network (additional role to existing daily role before I'd even thought about this crazy IT thingy as a career) and even with jus 25 devices it was a PITA to keep track of the IP addresses and I did not know too much about DHCP back then, lol

Think this is the tutorial I used for NGINX Proxy Manager. Works Internally but I'm trying to set it up with Cloudflare tunnel which is proving a bit of a challenge. Any pointers on that I'll be happy :-) . Current setup is Public Cloudflare > CloudFlare Tunnel container > NPM on different network but that network setup works for plenty of other docker setups I run. The tunnel is up but get too many redirects when accessing internal services from internet over the tunnel.

Keyword = should :-)

This is the way we did it at a previous place. We hid the corporate device owned SSID to stop confusion for end users. The less SSIDs you have the better though 3 max is ideal. So if you say have a org managed SSID and a Guest/BYOD. For instance you could prob put other devices on the org owned such as IOT and have a different vlan given to them based on the radius policies.

What do the switch CPUs look like? Loops are most likely at the wall port end most of the time. I've only ever seen one (student had connected wall port to wall port) thankfully when it happened it only effected one vlan as we had multiple client vlans. When it happens normally all the activity lights on the switches flash really quick altogether this happened with us as all 3 switches in the stack were effected.

To me that level of latency does not look too bad. Are your switches static or dhcp IP assigned? Do you have a core switch with intervlan routing or is all the routing been done at the router/firewall? Also the IP addresses, do they have same MAC address?

Strength training for the first time in 6 months yesterday, arms are aching already but not looking forward to tomorrows pain, lol.

Can your firewall do packet captures on interfaces? These are sometimes more reliable in the fact you can see if the traffic hits the firewall at all on it's interfaces. Then workout if it is security or NAT/port forwarding issue. The firewall may be dropping the packet if it does not know what to do with it and it does not get as far as logging the traffic. But you can also see if it is reaching the firewall at all. i.e. being blocked by your ISP. This has been a god send to us especially when third parties claim/swear blind it is something our side causing the issue, lol.

Wonder if this is a shared password between all the routers, if so not great at all.

Tried to change my neighbours SSID over the weekend. What a PITA it was, thanks Sky box, at least managed to change the password on it. Wanted to change the SSID to something different and not include the name of the provider in the SSID. No option to add an additional SSID either.

Made me Lol :-)

Have you tried running netstat with option -anob

I have heard of some issues if you are replacing networked printers rather than jus applying them through GPP The way I did this at previous place was to use GPP with loopback processing so PCs in certain areas got specific printers no matter who logged on/

Private/Random MAC addresses rather than spoofed??? https://www.mist.com/get-to-know-mac-address-randomization-in-2020/

Same here, 2019 I did a 20mile run in 3hours and about 12 months after heart surgery. It was a lovely march morning and started about 6am and I did not even take fluids but had money and shops on the way if I needed them. I felt great when I finished and such a high for the rest of the day. Post a good run generally makes me feel like I am OK, It is good for mental health too. I never have have music, podcasts or anything in my ear as a lot of my distance runs are on single track roads and I generally like to be aware of all around me even though sometimes I might get in the zone :-)

Doing a marathon is hard work. I did 2021, my first in 4h 45m, I was 51yo. Up to mile 17 was fine then on it was hard work and had to walk/run. Suggest before taking on exercise you should speak to your doctor of course. There are loads of training plans for marathons and 5k/10k which are well worth a look. The training is not always distance but a mixture of speed work too. If you have not run much for years you can also do the the couch to 5k. Then there are running plans to up that to 10k in the same manner mixing running and walking. Parkrun is also a good call, especially for the social and you can walk many do. Don't forget to stretch :-)

Yep interesting dev regarding Shadow Mode. Still to be released in v4? But seems like now Unifi have started implementing some form of HA :-) Be nice to see it in depth how it works. UPDATE: "Currently, Shadow Mode operates as a “Warm Spare,” meaning some manual intervention is required, however this will become fully automated in an upcoming release."

Email, Teams, etc. etc. There are a few posts on here for emergency notifications but that might be taking it to far and numb users into ignoring messages if not used for emergency?? Scrap this, should of read the post better.

There is normally nothing wrong with using DHCP for the AP management and if you are using Unifi (and other WiFi controllers) you can easily see what IP address an AP has. Jus be careful when you change over to DHCP to not have the DHCP server give out an address that is assigned to a different AP statically.

It can depend when it comes to the firewall. Some firewalls deny by default between different interfaces/zones where as others allow by default, you'd need to check with your firewall how it works. But yep allow minimum to internal or better, nothing :-)

Yep with Unifi and some other APs you normally untag (or native) the management then tag (or trunk) the vlans that are being used by the SSIDs. Our APs work a bit different as are the controllers do all the work and the APs once setup are paperweights without the controllers. The APs in our case form a tunnel to the controller but they can be on any vlan. Separating devices into different vlans splits up your network into broadcast domain limiting effect of switching loops although using spanning tree should prevent them.